dépôts / lhc / web / wiklou.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 68cf586) | patch
SECURITY: Don't parse usernames as wikitext
authorcsteipp <csteipp@wikimedia.org>
Mon, 19 May 2014 19:00:57 +0000 (12:00 -0700)
committermglaser <glaser@hallowelt.biz>
Thu, 29 May 2014 17:03:59 +0000 (19:03 +0200)
commitbb22fa7ae3c20c1cc8cfeaaff61553577081780f
treea9e31d6aa77f95894634bfd4c61a6ddc5e68d889tree | snapshot
parent68cf5862517c135ff26704bf2074fd32a62fa1d1commit | diff
SECURITY: Don't parse usernames as wikitext

On Special:PasswordReset, don't parse the username as wikitext since
the wikitext is parsed according to the wiki's configuration (might
include wgRawHtml), and the wiki may be private.

Bug: 65501
Change-Id: Ic3e5d42e1be5acc42ba89ae853c5ecbfec04fa91
includes/specials/SpecialPasswordReset.php diff | blob | history
Wiklou, le Wiki du Wiklou